httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Behlendorf <>
Subject Re: Finish 1.2!
Date Sat, 11 Jan 1997 20:16:10 GMT
On Sat, 11 Jan 1997, Randy Terbush wrote:
> I would be against our forcing an OS which has snprintf() into using
> ours.

We're not talking about much code here, not nearly as much as regex, and there
aren't speed/efficiency considerations as there are with regex.  It's more
secure to validate the code once than rely upon variable implementations -
didn't someone say BSD's was insecure?

My vote would be to put it in and make it the only one used, i.e. ap_snprintf.



View raw message